Skip to content
OpenAdvisories

Product · dromara

Sa-Token

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2025-15117

    Dromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization

    A weakness has been identified in Dromara Sa-Token up to 1.44.0. This affects the function ObjectInputStream.readObject of the file SaJdkSerializer.java. Executing manipulation can lead to deserialization. The attack may be launched remotely. This attack is c…

    dromara Sa-Token